Login Request a demo
Critical severity · published Sep 16, 2024
CVE-2024-45415
The HTTPD binary in multiple ZTE routers has a stack-based buffer overflow vulnerability in check_data_integrity function
9.8
CVSS
0.5%
EPSS
No
On KEV
Description
The HTTPD binary in multiple ZTE routers has a stack-based buffer overflow vulnerability in check_data_integrity function. This function is responsible for validating the checksum of data in post request. The checksum is sent encrypted in the request, the function decrypts it and stores the checksum on the stack without validating it. An unauthenticated attacker can get RCE as root by exploiting this vulnerability.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.5% · higher than 42% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
ZE
Zxhn E1600 Firmware · Zte
V1.0.0.2B1.1000 · source: CISA
ZE
Zxhn E2603 Firmware · Zte
V1.0.1 · source: CISA
ZE
Zxhn E2615 Firmware · Zte
V1.0.1 · source: CISA
ZE
Zxhn E2618 Firmware · Zte
V1.0.0.2B4.3000 · source: CISA
ZE
Zxhn E500 Firmware · Zte
V1.0.1.1B2.1000 · source: CISA
ZH
Zxhn H108n Firmware · Zte
V2.6.20.ROST12 · source: CISA
ZH
Zxhn H168a Firmware · Zte
TTN.1T1_211029 · source: CISA
ZH
Zxhn H168n Firmware · Zte
V3.5.5_CO.1T1 · source: CISA
ZH
Zxhn H338a Firmware · Zte
V1.5.0_H3A.1T9P1-o · source: CISA
ZZ
Zxhn Z500 Firmware · Zte
V1.0.1.1B2.1000 · source: CISA
Affected product
ZE
Zxhn E1600 Firmware
Zte
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2024-45415
CVE.org
https://www.cve.org/CVERecord?id=CVE-2024-45415
wr3nchsr.github.io
https://wr3nchsr.github.io/zte-multiple-routers-httpd-vulnerabilities-advisory/
More from Zxhn E1600 Firmware
9.8
CVE-2024-45414
The HTTPD binary in multiple ZTE routers has a stack-based buffer overflow vulnerability in webPrivateDecrypt function
8.1
CVE-2024-45413
The HTTPD binary in multiple ZTE routers has a stack-based buffer overflow vulnerability in rsa_decrypt function
8.1
CVE-2024-45416
The HTTPD binary in multiple ZTE routers has a local file inclusion vulnerability in session_init function